b32ca9e46b91e233872568c6d667ab08b958287cc078e007b7cb1a48228e9621

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 00:56

Target

734f5b37229a654b2d1f0f51cfb23166.exe
Size

44KB
MD5

734f5b37229a654b2d1f0f51cfb23166
SHA1

174b0b9e26a55e52ce3cccf9e174ceff24b853fc
SHA256

b32ca9e46b91e233872568c6d667ab08b958287cc078e007b7cb1a48228e9621
SHA512

da9576e31f3550c25fe37d2b66d04fd755e03ea132e3bbdad67cf6130623629978c049fe462140ef16b70bb4dd72898a7eca842c7bec97b5f50d3e4508ad8790
SSDEEP

768:j6TbLJVRbuDWjy/oWEVAMVTxjTz69Bs1HeRu+VAgLbSXdRhhOx7H0uYkz:8jID3oWMtjTks1HezAeYHDOx7Hr

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1952	2240	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 1952	2240	734f5b37229a654b2d1f0f51cfb23166.exe	28
PID 2240 wrote to memory of 1952	2240	734f5b37229a654b2d1f0f51cfb23166.exe	28
PID 2240 wrote to memory of 1952	2240	734f5b37229a654b2d1f0f51cfb23166.exe	28
PID 2240 wrote to memory of 1952	2240	734f5b37229a654b2d1f0f51cfb23166.exe	28

C:\Users\Admin\AppData\Local\Temp\734f5b37229a654b2d1f0f51cfb23166.exe
"C:\Users\Admin\AppData\Local\Temp\734f5b37229a654b2d1f0f51cfb23166.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 88
  2⤵
  - Program crash
  PID:1952

memory/2240-0-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download